alexazhou/VeryNginx
VeryNginx
VeryNginx is a Lua-based Nginx extension and programmable web application firewall. It provides a management control panel and a traffic monitoring dashboard to configure server settings and analyze request statistics without manual configuration file edits.
The project implements a programmable security layer to filter malicious traffic and block common web attacks, such as SQL injection and directory traversal. It includes tools for bot traffic restriction through request rate limiting and browser identity verification.
The system covers traffic management via URI routing and redirection, as well as real-time observability. This includes monitoring server health, analyzing network traffic, and aggregating performance metrics and status code distributions per unique resource.
Features
- Lua-Based Extensibility - Implements a programmable request processing engine using Lua to handle dynamic traffic logic within Nginx.
- Web Application Firewalls - Provides a programmable firewall to filter malicious traffic and block SQL injection and directory traversal attacks.
- NGINX Configuration Management - Provides mechanisms to inject management and security settings into the Nginx runtime via configuration directives.
- Nginx Management Panels - Provides a web-based interface for configuring traffic routing and managing server settings.
- Request Override Rules - Implements conditional traffic behaviors by combining request matchers with targeted server actions.
- Custom Request Logic Execution - Executes specific actions when incoming requests match predefined criteria and reusable patterns.
- Real-Time Traffic Dashboards - Provides a real-time visualization dashboard for analyzing request statistics and server connections.
- URI Routing and Redirections - Implements URI routing and redirection to direct incoming traffic toward backend servers or local static files.
- Scriptable Access Controls - Enforces rate limits and validates browser identities using custom programmable logic before requests reach the backend.
- Request Rate Limiting - Implements request rate limiting and browser identity verification to block automated bots and unauthorized clients.
- Programmable Security Rules - Filters malicious traffic by executing programmable security rules and patterns against incoming requests.
- Real-time Performance Monitoring - Tracks live request counts, response latency, and active connections to monitor server health.
- Programmable Logic Management - Implements conditional server behaviors and request matching rules using a Lua-based management panel.
- Bot Blocking - Blocks automated bots and unauthorized clients using request rate limiting and browser identity verification.
- Metric Aggregation Zones - Uses shared memory zones to store real-time request counts and traffic metrics for fast cross-worker access.
- Network Traffic Analysis - Analyzes network traffic and response times in real time to ensure stable server operation.
- Server Health Monitoring - Tracks real-time requests per second and active connection counts to evaluate overall system health.
- URI Access Statistics - Provides aggregated request counts and response latency metrics per unique URI to analyze traffic patterns.
- URI Performance Metrics - Records status code distributions and performance metrics per unique URI to analyze traffic behavior.
- Traffic Routing - Routes incoming requests and rewrites URIs to direct traffic toward backend servers or static files.
- Application Servers - Enhanced server distribution with advanced management features.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
